$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/CCC7F1622C2A11F198E8A6989D833773.roa File: CCC7F1622C2A11F198E8A6989D833773.roa (raw, json) Hash identifier: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk= Subject key identifier: 3B:EC:EB:B4:06:54:E9:02:86:1F:8F:0F:F7:5B:6D:01:2C:A0:23:27 Certificate issuer: /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Certificate serial: 02 Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/CCC7F1622C2A11F198E8A6989D833773.roa Signing time: Mon 30 Mar 2026 11:22:56 +0000 ROA not before: Mon 30 Mar 2026 11:22:56 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154506 IP address blocks: 2001:df6:b540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Validity Not Before: Mar 30 11:22:56 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69ca5d10-2adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:70:6f:c6:cc:dd:6f:cc:31:51:9b:f7:1a: 9b:46:bf:13:e1:ba:85:fd:96:ef:39:87:bb:12:2e: d3:e0:4e:9e:5b:b5:d8:41:fe:f0:e7:8b:14:f2:74: 36:9d:9a:8f:2f:76:a6:e1:7f:bb:ea:4f:6a:a7:6e: 58:51:01:e0:f6:ea:ce:97:a5:34:d0:8f:cf:e7:13: e0:c1:81:d3:de:16:48:ce:d9:71:4e:64:bc:cb:76: a6:fb:2d:b7:13:0d:5c:1b:d3:bf:65:cc:73:ce:78: 14:28:85:9f:44:83:5e:92:4b:c0:52:94:64:10:c2: 84:00:6f:fc:39:e9:a2:18:98:17:63:53:c0:e8:de: 70:6e:ae:0d:f0:8b:c8:27:e1:9a:66:3e:ab:dd:d8: e3:2a:2c:92:52:1c:2d:2e:d3:81:80:05:e1:96:fe: a6:3e:20:ec:e7:65:2b:da:a5:7e:58:31:27:8b:70: 9a:4f:17:c4:e0:73:0c:3a:04:4c:fb:b5:ed:ed:d5: 94:01:6c:4e:8d:5c:96:5f:71:66:bb:f8:fc:1d:46: b4:1f:b4:21:01:d0:fc:b6:cc:01:e4:d7:f2:39:33: fd:84:a9:44:7e:1c:c1:21:98:77:26:bc:85:3b:fb: 5a:b3:bf:83:97:38:46:be:bb:c2:d9:c3:6e:84:37: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EC:EB:B4:06:54:E9:02:86:1F:8F:0F:F7:5B:6D:01:2C:A0:23:27 X509v3 Authority Key Identifier: keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/CCC7F1622C2A11F198E8A6989D833773.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:b540::/48 Signature Algorithm: sha256WithRSAEncryption 9f:9f:6f:f2:41:1a:e7:9c:7c:46:ff:9d:25:53:a3:34:72:23: dd:5a:ca:35:6d:e7:25:3a:04:1e:71:2a:4e:00:9b:92:e4:b4: af:9b:f8:61:cd:06:ad:98:34:09:e9:24:75:2d:ed:76:2a:be: 45:2a:0d:c4:50:b5:20:41:71:87:2a:5a:81:7f:cf:ce:3d:e3: 87:e7:7a:4f:15:f3:e6:ba:f0:b3:4e:61:1c:aa:4f:39:68:ad: e3:85:90:d2:a4:df:14:dd:f0:b0:75:07:4c:79:94:fa:77:ef: cf:22:b7:0e:9e:d1:7b:7a:0c:ec:9f:10:de:91:95:4f:a5:33: c3:cc:a4:2c:e8:07:48:f3:42:89:25:c4:60:9d:3e:a9:ba:3a: 9f:95:29:61:69:2e:1d:40:d5:53:61:ef:ae:97:35:1b:2e:b5: 9d:20:79:8c:0a:a5:dd:2a:d2:47:51:6e:c5:9d:ce:aa:0c:df: ac:a2:03:0a:58:b3:f8:2e:81:b8:11:f3:3e:21:05:95:69:7f: 41:d4:9f:e9:fc:7e:94:fa:81:a9:22:90:fa:e5:8f:72:7e:25: f6:3b:60:1e:0f:92:d7:fb:05:e1:7f:bd:e7:f1:f8:21:a3:0b: 0f:71:60:8b:0a:b8:e0:e2:87:0a:cc:cb:6f:40:76:67:44:de: 27:d7:0c:5b -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjA0QzExMC8GA1UEBRMoNzMxM0VCRjVDMDFGNEI3OTZEOTA1OEJBQzNDNjVGNTVC MzA1Q0E3NzAeFw0yNjAzMzAxMTIyNTZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Y2E1ZDEwLTJhZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYc3Bvxszdb8wxUZv3GptGvxPhuoX9lu85h7sSLtPgTp5btdhB/vDnixTydDad mo8vdqbhf7vqT2qnblhRAeD26s6XpTTQj8/nE+DBgdPeFkjO2XFOZLzLdqb7LbcT DVwb079lzHPOeBQohZ9Eg16SS8BSlGQQwoQAb/w56aIYmBdjU8Do3nBurg3wi8gn 4ZpmPqvd2OMqLJJSHC0u04GABeGW/qY+IOznZSvapX5YMSeLcJpPF8Tgcww6BEz7 te3t1ZQBbE6NXJZfcWa7+PwdRrQftCEB0Py2zAHk1/I5M/2EqUR+HMEhmHcmvIU7 +1qzv4OXOEa+u8LZw26ENyVrAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUO+zrtAZU 6QKGH48P91ttASygIycwHwYDVR0jBBgwFoAUcxPr9cAfS3ltkFi6w8ZfVbMFyncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMDRDL0Y2MDQxQTNDMkMy NjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNsdGtGaTZ3OFpmVmJNRnlu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hQcjljQWZTM2x0a0ZpNnc4WmZWYk1GeW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA0Qy9GNjA0MUEzQzJDMjYxMUYxOUJBRkNBMUQ5QzgzMzc3My9DQ0M3RjE2MjJD MkExMUYxOThFOEE2OTg5RDgzMzc3My5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32tUAwDQYJKoZIhvcNAQELBQADggEBAJ+fb/JBGuecfEb/nSVT ozRyI91ayjVt5yU6BB5xKk4Am5LktK+b+GHNBq2YNAnpJHUt7XYqvkUqDcRQtSBB cYcqWoF/z84944fnek8V8+a68LNOYRyqTzloreOFkNKk3xTd8LB1B0x5lPp3788i tw6e0Xt6DOyfEN6RlU+lM8PMpCzoB0jzQoklxGCdPqm6Op+VKWFpLh1A1VNh766X NRsutZ0geYwKpd0q0kdRbsWdzqoM36yiAwpYs/gugbgR8z4hBZVpf0HUn+n8fpT6 gakikPrlj3J+JfY7YB4Pktf7BeF/vefx+CGjCw9xYIsKuODihwrMy29AdmdE3ifX DFs= -----END CERTIFICATE-----Generated at Sun Apr 5 22:22:13 2026 by rpki-client